This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2S4Iq-cEfeCVl8rMq4sQJgfoQ7s.roa File: 2S4Iq-cEfeCVl8rMq4sQJgfoQ7s.roa (raw, json) Hash identifier: 3nlfF+MXhSAcOmOjgQIU2TZl3f/beAH3RIrur/NfBvk= Subject key identifier: D9:2E:08:AB:E7:04:7D:E0:95:97:CA:CC:AB:8B:10:26:07:E8:43:BB Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019025DFAE9B258B2D1991C6F6C31E019E25 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2S4Iq-cEfeCVl8rMq4sQJgfoQ7s.roa Signing time: Mon 17 Jun 2024 11:05:34 +0000 ROA not before: Mon 17 Jun 2024 11:05:34 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 20473 IP address blocks: 45.9.117.0/24 maxlen: 24 45.86.12.0/24 maxlen: 24 45.130.124.0/24 maxlen: 24 2a0c:7884::/32 maxlen: 32 2a0e:1a84::/32 maxlen: 32 2a0f:2d80:1292::/48 maxlen: 48 2a0f:7d00:1::/48 maxlen: 48 2a0f:bc00:a1c4::/48 maxlen: 48 2a0f:e847:1::/48 maxlen: 48 2a13:18c3::/32 maxlen: 32 2a13:2b40::/29 maxlen: 32 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:25:df:ae:9b:25:8b:2d:19:91:c6:f6:c3:1e:01:9e:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jun 17 11:05:34 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=d92e08abe7047de09597caccab8b102607e843bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:68:2b:24:c9:c9:a5:b1:64:46:bb:eb:3f:bd: db:83:47:93:b8:00:0a:22:a9:9d:24:5e:dc:a8:7d: b4:da:51:ea:e3:7a:64:d4:f7:dd:c5:b7:5b:be:ed: 57:48:60:f1:5f:99:10:f3:fa:fc:d5:d3:3a:94:50: c0:66:af:0e:6b:67:85:85:ee:99:8f:19:5d:5b:71: d6:06:2f:a3:f4:a5:dd:93:9d:83:fe:ae:31:42:0c: 82:f7:26:33:ff:05:85:ec:e1:7f:42:d3:fe:14:e9: 06:f3:9c:ee:fe:34:97:f9:50:54:bf:47:b5:c6:12: d4:7e:86:cb:1c:c6:4e:ef:19:fb:c1:b6:17:19:5e: b0:26:0b:d5:8c:94:0d:f2:e8:53:36:26:af:77:fc: 23:a0:1a:11:ba:6e:6a:54:2d:9f:06:27:fd:f1:9f: bd:36:1f:1e:49:6d:33:ab:5e:f4:f0:4a:60:57:59: d5:1e:bb:0f:4d:54:a4:3f:63:c9:a0:2e:96:a0:e6: ec:54:85:a7:59:4b:a1:2d:56:46:c6:22:6a:57:f8: 44:e5:43:51:d3:a3:86:b0:f9:48:78:90:c4:6a:84: f3:b6:7a:83:47:15:8e:d4:d6:b1:b0:fa:1f:9f:6c: 74:7b:ff:7e:a5:9b:00:1b:1d:da:f2:33:21:9a:16: 3d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2E:08:AB:E7:04:7D:E0:95:97:CA:CC:AB:8B:10:26:07:E8:43:BB X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2S4Iq-cEfeCVl8rMq4sQJgfoQ7s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.117.0/24 45.86.12.0/24 45.130.124.0/24 IPv6: 2a0c:7884::/32 2a0e:1a84::/32 2a0f:2d80:1292::/48 2a0f:7d00:1::/48 2a0f:bc00:a1c4::/48 2a0f:e847:1::/48 2a13:18c3::/32 2a13:2b40::/29 Signature Algorithm: sha256WithRSAEncryption 95:1e:6b:6f:c4:c7:35:30:1c:6f:89:87:a3:38:02:78:4d:87: 9e:ea:37:57:8d:fd:5f:06:9c:2b:5c:57:d8:62:75:c2:0b:89: 79:e4:91:77:12:bf:b6:51:7b:e3:b5:eb:8f:2f:79:5d:7e:7c: 29:08:96:d5:5f:bc:ec:fe:26:e5:75:c1:c5:81:5d:bc:f3:96: 9e:8a:2c:2c:e6:8a:99:a1:34:93:fb:6c:13:35:51:69:79:ec: bf:ba:8d:04:ce:2c:41:b8:d9:f0:7e:50:b2:1b:3f:eb:66:03: 90:42:c3:49:ab:31:83:de:6d:8c:50:f8:50:e4:14:2b:5c:3f: 9e:21:5f:0e:af:34:b0:d0:dd:0f:76:e6:7f:d7:23:93:37:e1: 51:f1:ad:54:49:8d:0f:3c:04:03:b7:05:9f:39:c1:91:e7:9f: f1:df:cd:8b:32:88:6c:37:3f:18:ae:16:87:c6:5c:a0:3a:0d: 10:cb:b2:80:fc:24:c2:e4:b5:44:56:f8:e7:98:ea:d3:c0:ba: c1:33:f6:e0:a5:dc:d0:e8:35:a9:55:f5:6c:3b:f9:a1:27:c2: 3b:94:89:c2:96:a1:16:d5:f2:13:c8:c3:35:f9:df:e2:10:55: b3:ea:f7:5d:2a:d8:93:be:ac:09:37:fc:4a:33:f0:e7:3e:aa: b5:ab:32:4e -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZAl366bJYstGZHG9sMeAZ4lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjQwNjE3MTEwNTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTJlMDhhYmU3MDQ3ZGUwOTU5N2NhY2NhYjhiMTAyNjA3ZTg0M2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGgrJMnJpbFkRrvrP73bg0eTuAAK IqmdJF7cqH202lHq43pk1Pfdxbdbvu1XSGDxX5kQ8/r81dM6lFDAZq8Oa2eFhe6Z jxldW3HWBi+j9KXdk52D/q4xQgyC9yYz/wWF7OF/QtP+FOkG85zu/jSX+VBUv0e1 xhLUfobLHMZO7xn7wbYXGV6wJgvVjJQN8uhTNiavd/wjoBoRum5qVC2fBif98Z+9 Nh8eSW0zq1708EpgV1nVHrsPTVSkP2PJoC6WoObsVIWnWUuhLVZGxiJqV/hE5UNR 06OGsPlIeJDEaoTztnqDRxWO1NaxsPofn2x0e/9+pZsAGx3a8jMhmhY9pQIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFNkuCKvnBH3glZfKzKuLECYH6EO7MB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvMlM0SXEtY0VmZUNWbDhyTXE0c1FKZ2ZvUTdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjAYBAIAATASAwQALQl1AwQA LVYMAwQALYJ8MEYEAgACMEADBQAqDHiEAwUAKg4ahAMHACoPLYASkgMHACoPfQAA AQMHACoPvAChxAMHACoP6EcAAQMFACoTGMMDBQMqEytAMA0GCSqGSIb3DQEBCwUA A4IBAQCVHmtvxMc1MBxviYejOAJ4TYee6jdXjf1fBpwrXFfYYnXCC4l55JF3Er+2 UXvjteuPL3ldfnwpCJbVX7zs/ibldcHFgV2885aeiiws5oqZoTST+2wTNVFpeey/ uo0EzixBuNnwflCyGz/rZgOQQsNJqzGD3m2MUPhQ5BQrXD+eIV8OrzSw0N0PduZ/ 1yOTN+FR8a1USY0PPAQDtwWfOcGR55/x382LMohsNz8YrhaHxlygOg0Qy7KA/CTC 5LVEVvjnmOrTwLrBM/bgpdzQ6DWpVfVsO/mhJ8I7lInClqEW1fITyMM1+d/iEFWz 6vddKtiTvqwJN/xKM/DnPqq1qzJO -----END CERTIFICATE-----Generated at Tue Dec 30 04:33:47 2025 by rpki-client